EU AI Act – Artificial Intelligence Regulation
Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI Act)
Overview
The EU AI Act is the world’s first comprehensive law regulating artificial intelligence. It follows a risk-based approach.
Risk Categories
Prohibited AI Practices
- Social scoring by public authorities
- Subliminal manipulation
- Real-time remote biometric identification in public spaces (with exceptions)
High-Risk AI Systems
- AI in critical infrastructure
- AI in education and vocational training
- AI in employment and human resources
- AI in law enforcement and migration
- AI in medical devices
Limited Transparency Obligations
- Chatbots must be identifiable as AI
- Deepfakes must be labelled
Minimal Risk
- No additional requirements (e.g. AI in video games)
Timeline
- February 2025: Prohibited AI practices
- August 2025: Requirements for General Purpose AI (GPAI)
- August 2026: High-risk AI systems (Annex III)
- August 2027: High-risk AI in regulated products
Legal Sources
Frequently Asked Questions
Who is affected by the AI Act?
All companies that develop, distribute, or deploy AI systems in the EU – regardless of whether the company is based in the EU.
When does the AI Act apply?
The regulation entered into force on 1 August 2024. Requirements are phased in gradually from February 2025 to August 2027.